• The blobs were compiled using riscv32-unknown-elf-gcc_8.3.0 -march=rv32imfc -mabi=ilp32f -gdwarf -Os -std=gnu99 -ffunction-sections -fdata-sections -fstrict-volatile-bitfields -fshort-enums -ffreestanding -fno-strict-aliasing

• The target likely supports atomics. If so we may use -march=rv32imafc.

• Our funcdiff.py and headerdiff.py tools. See their documentation

• RISC-V GNU Compiler Toolchain

• Ghidra, an IDA-like RE suite courtesy of the NSA. Use this fork if you want to load RISC-V binaries that have relocations (i.e. unlinked bins)

• Cutter, a graphical frontend for radare2

• DWARF Explorer, an explorer for DWARF debugging data

  • The proprietary libraries still contain DWARF data, but tool support for showing it varies greatly. This will show you the raw DWARF information (e.g. structures, function local variables, inlined function information).

• Add your favorite disassembly tools here. If the tool is not free, mark it with (non-free).

WiFi and BLE-related binaries available in the BL602 are included within this repo:

• blobs/ contains .a files of the libraries along with compiled examples of their use, as .elf.

• images/ has .bin files of factory PineCone firmware. See the README for the directory.

• libatcmd/, libbl602_wifi/ and libblecontroller/ contain disassembled binaries of the libraries' object files, along with disassembly of their respective example app.

Sources that are being reverse engineered are located in components/, and reconstructed headers are in dwarf/ and headers/. Tooling is available in the script/ directory.

• Pine64 SDK fork’s documentation, if you figure something out that’s documentation-worthy, please update that documentation.

• BL602/BL604 Datasheet

• BL602/BL604 Reference Manual

• SDK

• BL602 ISP Protocol Documentation

• Official Open-Source Flasher for Bouffalo Chips

• Linux Driver and Firmware for SDIO WiFi & BT Module based on BL602